Skip to content
DentaFlow

Subprocessors

Last updated
14 August 2026
Version
1.1

DentaFlow processes your patients' data on behalf of your clinic. This page tells you which external providers take part in the service and what data each one handles.

What is a subprocessor

To operate, DentaFlow relies on a few external providers, for example, to host the database or to protect the connection. A subprocessor is one of those providers that, in delivering its service, may access personal data you manage in the platform. This page exists so you know who they are.

For your patients' data, the clinic is the controller: you decide what data is entered and what it is used for. DentaFlow is the processor: it handles that data following your instructions. When DentaFlow engages a third party for part of the service, that third party is the subprocessor and is bound by contract to the same security and confidentiality duties.

Current subprocessors

These are all the subprocessors DentaFlow uses today. The list is short on purpose: beyond the infrastructure the platform needs to run, the only additions are measurement tools, and none of them receives your patients' data.

ProviderServiceData processedLocation
Contabo GmbHServer and object storage: database, clinical files, and hosting of the public websiteAll platform data: patients, clinical history, images, calendar, billing, and user accountsUnited States
Cloudflare, Inc.Reverse proxy, TLS termination, and attack protectionConnection metadata (IP address, headers) and HTTP traffic in transitGlobal network
Microsoft CorporationMicrosoft Clarity: session recordings and heatmaps, to understand how the interface is usedInside the application, the rule is that text must be masked before leaving the browser and that only fixed interface elements may appear unmasked. No patient dataUnited States
PostHog, Inc.Aggregated product-usage metricsUsage events and an internal identifier; never patient dataUnited States
Google LLCGoogle Analytics and Google Tag Manager, on the public site only, to find out where visitors come fromBrowsing data of public site visitors. Not present inside the applicationUnited States
Brevo (Sendinblue SAS)Transactional email: account verification, appointment reminders and anamnesis linksRecipient name and email address, which may belong to a clinic user or to a patientFrance
Clinical files (X-rays, intraoral photos, and PDFs) are kept in Contabo object storage, inside a private space, and are served through signed links that expire after one hour.
International transfer: Contabo servers are located in the United States, Cloudflare operates a global network, Microsoft, PostHog and Google are also United States companies, and Brevo operates from France, so your data is transferred abroad. Law 7593/2025 requires safeguards when the destination country lacks an adequacy decision from the supervisory authority, and the ANPDP has not yet published that list. As a safeguard, DentaFlow relies on the data processing agreements these providers offer their customers, which incorporate European Union standard contractual clauses.
SIFEN (the DNIT electronic invoicing system) is not a subprocessor. It is Paraguay's tax authority, the recipient of electronic tax receipts by legal obligation. It receives the clinic's RUC and legal name and the invoice recipient's details (the name and ID document of the patient or whoever pays). This is a disclosure required by law, not a subcontracting of services.

Change notification

DentaFlow will notify you by email at least 30 (thirty) days before adding a new subprocessor or replacing an existing one, so you can review it in advance.

How to object

If you disagree with a new subprocessor, you can object by writing to [email protected] within the notice period. If the objection cannot be reasonably resolved, you may terminate the contract without penalty.